Unsure about trojan-gen{Other}

Viruses and worms
1

Recently, Avast picked up about 70 files that consisted of Win32:Sality and Trojan-Gen{Other}.
I find this suspicious because i have been using Avast for about a week with nothing detected, then suddenly today 70 items were detected. The files also are said to be last modified last year.

Before Avast suddenly picked up the items i scanned a full system scan with OneCare(Windows free scanner) and Malwarebytes and BOTH ended with no malware detected. I have had Trojans in my computer before from last year but recently cleaned it.

I would like some help about this topic since it is very weird that 70 items get detected on one day. I also noticed that 1/4 of the files are Tojan-Gen which in Trend-Micro terms are things that behave like Trojans. The files that have been said to be Worms/Trojans are mainly from System Volume Information and program files, and one from the MapleStory folder “MapleStory.exe”.

I have chested(quarantined) the files and is currently not sure about deleting the files. I would also like someone to explain what Win32:sality because i can’t find it in the database.

2

Try MBAM for better results^^Just to make sure^^
(www.malwarebytes.org)^^

W32/Sality: http://www.sophos.com/security/analyses/viruses-and-spyware/w32salityaa.html

W32/Sality: http://digg.com/security/W32_Sality_Virus_Description_and_How_to_Remove_It

Hope this helps^^

-AnimeLover^^

3

I used Malwarebytes full system scan before Avast detected the 70 items.

4

Umm… U could try a boot-scan^^

If ever there is a detection, better put it in the chest than to delete it^^

Report any findings and outcomes^^

Afterwards, try posting a HiJackThis Log here^^
(www.filehippo.com/download_hijackthis/)^^

-AnimeLover^^

5

Win32:Sality is a file infecter virus and if it gets in there is a high likelihood that multiple files could be infected very quickly. avast has 172 win32:sality variants in the database.

You could also check the one or two offending/suspect files to confirm the detection at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.